Complete and utter SQL noob. We have an application that talks to MSSQL, and I'm trying to add a read-only user so someone can run a separate program that talks to the database. I figured out how to attach a user to the database, and GRANT SELECT ON <TABLE> TO [USER] or DENY ALL ON <TABLE> TO [USER], but there's like a hundred tables in this DB and if I try to do this a hundred times I'm inevitably going to miss something. Related tables all have the same first two characters (SO*, PR*, MI*, etc), so can I use wildcards to do that, or would I be better off trying to script it so it runs on each table in turn?